Document chain name length restriction fix

Shorewall/changelog.txt

@@ -4,6 +4,8 @@ Changes in Shorewall 4.4.16.3
 
 2)  Correct two defects in compiler module loading.
 
+3)  Ensure that manual and accounting chains aren't too long.
+
 Changes in Shorewall 4.4.16.2
 
 1)  Add sch_prio to modules file.

Shorewall/known_problems.txt

@@ -23,8 +23,8 @@
        a) Copy /usr/share/shorewall/helpers to /etc/shorewall/
        b) Add 'loadmodule sch_prio' to the copy
 
-4)  If the SOURCE column in /etc/shorewall6/rules contains [address],
+4)  If the SOURCE column in /etc/shorewall6/rules contains an address
-    a spurious error is generated:
+    enclosed in [...], a spurious error is generated:
 
     Example:
 
@@ -34,7 +34,14 @@
 
     Workaround:
 
-    Use <address> instead. In the example above, use net:<::/0>.
+    Enclose the address in <...>.  In the example above, use
+    net:<::/0>.
+
+3)  Currently, Shorewall does not check the length of the names of
+    accounting chains and manual chains. This can result in 
+    errors when loading the resulting ruleset if a chain name is longer
+    than 29 characters.
+
 
 
 

Shorewall/releasenotes.txt

@@ -27,6 +27,11 @@ VI.   PROBLEMS CORRECTED AND NEW FEATURES IN PRIOR RELEASES
     b) A Perl diagnostic was issued when running on a monolithic kernel
        when the modutils package was installed.
 
+3)  Previously, Shorewall did not check the length of the names of
+    accounting chains and manual chains. This could result in 
+    errors when loading the resulting ruleset. Now, the compiler issues
+    an error for chain names longer than 29 characters.
+
 4.4.16.2
 
 1)  Startup could previously fail on a system where module autoloading